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DETAILED A CTION 

1 . Claims 1-30 have been examined. 

Drawings 

2. The drawings are objected to because the drawings are informal and somewhat difficult 
to read. A proposed drawing correction or corrected drawings are required in reply to the Office 
action to avoid abandonment of the application. The objection to the drawings will not be held 
in abeyance. 

Claim Objections 

3. Claims 1-30 are objected to because of the following informalities: triggering a break in 
said virus operation "is" said measurement value in line 9 of claim 1 . Appropriate correction is 
required. 

Claim Rejections - 35 USC § 102 

4. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on 
sale in this country, more than one year prior to the date of application for patent in the United States. 

5. Claims 1, 2, 8, 9, 11, 12, 18, 19, 21, 22, 28, and 29 are rejected under 35 U.S.C. 102(b) as 
being clearly anticipated by NachenbergU.S. Pat. No. 5826013 (hereinafter Nachenberg). 
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6. As per claim 1,11, and 21, Nachenberg discloses a method of detecting computer viruses 
within a computer file (Nachenberg: column 1 lines 14-16), said method comprising the steps of: 

a. Receiving a request to scan a computer file for computer viruses (Nachenberg: 
column 11 lines 10-28); 

b. Initiating a virus scanning operation upon said computer file (Nachenberg: 
column 3 lines 3-53; column 11 lines 10-22); 

c. Calculating during said virus scanning operation a measurement value indicative 
of an amount of data processing performed during said virus scanning operation 
(Nachenberg: column 2 lines 15-25); 

d. Comparing during said virus scanning said measurement value with a threshold 
value (Nachenberg: column 1 line 63 - column 2 line 50); and 

e. Triggering a break in said virus operation if said measurement value exceeds said 
threshold value (Nachenberg: column 1 line 63 - column 3 line 53). 

7. As per claim 2, 12, and 22, Nachenberg discloses a method as claimed according to 
claims 1,11, and 21 respectively. Nachenberg further discloses the method comprises the step of, 
upon occurrence of said break, determining using said measurement value whether or not said 
virus scanning operation should be terminated prior to completion (Nachenberg: column 3 lines 
37-53). 

8. As per claim 8, 18, and 28, Nachenberg discloses a method as claimed according to 
claims 1,11, and 21 respectively. Nachenberg further discloses said virus scanning operation 
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applies a plurality of test to said computer file, each test having an complexity value indicative of 
an amount of data processing associated with that test and said measurement value is a sum of 
complexity values for tests applied during said virus scanning operation (Nachenberg: column 1 
lines 63 - column 2 line 50; column 6 lines 32-40). 

9. As per claim 9, 19, and 29, Nachenberg discloses a method as claimed according to 
claims 8, 18, and 28 respectively. Nachenberg further discloses said plurality of test applied are 
selected in dependence upon said computer file (Nachenberg: column 1 line 18 - column 2 line 
50; column 6 lines 32-40). 

Claim Rejections - 35 USC §103 

10. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 1 02 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

11. Claims 3, 6, 7, 13, 16, 17, 23, 26, and 27 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Nachenberg in view of Banga et al. U.S. Pat. No. 6240447 (hereinafter 
Banga). 
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12. As per claim 3, 13, and 23 , Nachenberg discloses a method according to claims 1, 12, 
and 22 respectively. Nachenberg does not explicitly disclose said measurement value yields a 
processed data size value for data processed during said virus scanning operation. However, 
Banga discloses that limitation (Banga: column 7 lines 1-10). It would have been obvious to one 
having ordinary skill in the art to combine the teachings of Banga within the system of 
Nachenberg because it increases the efficiency by skipping a certain percentage of data without 
processed. 

13. As per claim 6, 16, and 26, Nachenberg discloses a method according to claims 2, 12, and 
22 respectively. Nachenberg does not explicitly disclose said measurement value yields a 
processed data size value for data processed during said virus scanning operation and step of 
determining is responsive to both said processed data size value and a computer file size value 
for said computer file when determining whether or not said virus scanning operation should be 
terminated prior to completion. However, Banga discloses that limitation (Banga: column 7 lines 
1-10): Same rationale applies here as above in rejecting claim 3. 

14. As per claim 7, 17, and 27, the combination of Nachenberg-Banga discloses a method 
according to claims 6, 16, and 26 respectively. Banga further discloses said step of determining 
calculates a measurement ratio of said processed data size value to said computer file size value 
and compares this with a termination size threshold ratio such that said virus scanning is 
terminated if said measurement ratio exceeds said termination size threshold ratio (Banga: 
column 7 lines 1-10). Same rationale applies here as above in rejecting claim 3. 
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15. Claims 4, 5, 14, 15, 24, and 25 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Nachenberg in view of Cozza U.S. Pat. No. 5649095 (hereinafter Cozza). 

16. As per claims 4, 5, 14, 15, 24, and 25, Nachenberg discloses a method according to claim 
1,11, and 21 respectively. Nachenberg does not explicitly disclose said amount of data 
processing performed includes data processing involved in any decompression of said computer 
file required for said virus scanning operation. However, Cozza discloses that limitation (Cozza: 
figure 4d and column 6 lines 6-45). It is well known in the art to decompress a file to its original 
content before using it. Therefore it would have been obvious to one having ordinary skill in the 
art to combine the teachings of Cozza within the system of Nachenberg because it allows the 
virus detection system to scan the original data after decompression. 

17. Claims 10, 20, and 30 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Nachenberg. 

18. As per claim 10, 20, and 30, Nachenberg discloses a method a method as claimed 
according to claim 2, 12, and 22 respectively. Nachenberg further discloses said virus scanning 
operation applies a plurality of tests to said computer file, each test having an complexity value 
indicative of an amount of data processing associated with that test, and said step of determining 
terminating said virus scanning operation prior to completion if said complexity exceeds a 
termination complexity threshold value (Nachenberg: column 1 line 63 - column 2 line 50; 
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column 6 lines 32-40). Nachenberg does not explicitly disclose said measurement value being a 
sum of complexity values for tests applied during said virus scanning operation and determining 
terminating said virus scanning operation prior to completion if said sum of complexity values 
exceeds threshold. However, Nachenberg discloses the complexity of heuristics will affect the 
efficiency of the system and should be treated carefully. It would have been obvious to one 
having ordinary skill in the art to use the complexity of the heuristics as threshold to increase the 
efficiency of the system. 

Conclusion 

19. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. 

Nachenberg U.S. Pat. No. 5999723 discloses state-based cache for antivirus software. 

Nachenberg U.S. Pat. No. 6357008 discloses dynamic heuristic method for detecting 
computer viruses using decryption exploration and evaluation phases. 

Chen et al. U.S. Pat. No. 5832208 discloses anti-virus agent for use with database and 
mail servers. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Shin-Hon Chen whose telephone number is (703) 305-8654. The 
examiner can normally be reached on Monday through Friday 8:00am to 4:30pm. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on (703) 305-9648. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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Examiner 
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